What is Secret Vault?

Secret Vault is an innovative solution designed to securely store and manage your organization's Secrets within your existing Office 365 and Azure environment. It is built on top of the Azure Key Vault enforcing Transport Layer Security (TLS) protocol to protect data. It allows you to effortlessly safeguard usernames, passwords, API keys, Certification keys and any critical data.

With Secret Vault, you gain a centralized, encrypted vault that integrates seamlessly into your existing Microsoft infrastructure. Build on the infrastructure you already trust. Within minutes, you can enhance your organization's data security all without ever leaving the trusted Microsoft ecosystem.

No need to manage and review the ever changing security protocols from other third party secret storage. Any organization with an Azure subscription can create and use Secret Vault.

Main Features:

One Time Password

Secret Vault includes a robust One-Time Password Management (OTM) feature, allowing you to centralize the management, sharing, and secrecy of OTPs. Say goodbye to the need for mobile devices with authenticator apps; with our simple web app, you can easily copy and paste OTPs, streamlining the process and enhancing convenience.

Manage Existing App Secrets

No need for expensive PAM solutions! Secret Vault ensures sensitive credentials such as API keys, passwords, and certificates are securely stored and managed. Granular access controls ensure that only authorized users and applications can access these secrets, while detailed logging and monitoring provide complete visibility over access activities. Seamlessly integrate your applications with Secret Vault, allowing them to programmatically retrieve secrets without exposing them to users.

Securely Share Secrets

Secret Vault allows you to securely share secrets; it uses existing Office 365 authentication and authorization mechanisms, ensuring only authorized users can access sensitive information. Comprehensive logging provides detailed records of access and sharing activities, enhancing traceability and accountability.

Architecture

Embrace a Future-Proof Solution: This enterprise-grade platform is meticulously designed to integrate seamlessly with your existing Azure and Office 365 investments, it leverages the cutting-edge protection suite that Microsoft is renowned for.

Robust Authentication and Authorization: The solution offers a sophisticated authorization mechanism for both standard and administrative users, ensuring secure access to the secret manager interface. Once authorized, users can safely interact with accessible secrets, reinforcing your organization's data integrity and confidentiality.

State-of-the-Art Monitoring: We utilize Azure App Insights for meticulous logging of all application interactions. This not only ensures transparency and traceability but also facilitates precise control over data, with Azure SQL Serverless database managing metadata. This includes granular permissions for viewing, editing, creation, and deletion of sensitive information.

Unparalleled Security: At the core of our offering is the Azure Key Vault, where your secrets are stored with utmost security. This design principle ensures absolute confidentiality, as even Microsoft does not have direct access to these vault-stored secrets.

Compliance and Security at Its Best: We are committed to providing the highest level of security. Our vault protection is fortified with Hardware Security Module (HSM) technology, compliant with FIPS 140-2 Levels 2 and 3 standards.